Appl. No. 09/852,244 

Amdt. dated August 18, 2010 

Reply to Office Action of May 18, 2010 

Amendments to the Claims: 

This listing of claims will replace all prior versions, and listings, of claims in 
the application: 

Listing of Claims: 

1. (Previously presented) A method for automatically provisioning a 
plurality of computing devices in accordance with established policies, the 
method comprising the steps of: 

creating a plurality of templates reflecting said policies; 

expanding at least one template at a central location to create a 

document comprising expanded information; and 
sending from the central location the document comprising the expanded 

information to said plurality of computing devices. 

2. (Original) The method of claim 1, further comprising interpreting the 
expanded information by agents which are respectively resident on each of said 
plurality of computing devices. 

3. (Previously presented) The method of claim 1 , wherein the structure of 
said plurality of templates includes conditional statements that determine 
whether a template is to be expanded with predetermined information on the 
basis of the computing device to which the expanded information is being 
provided. 

4. (Previously presented) The method of claim 3, wherein the plurality of 
templates includes a first category of templates that reflect policies applicable to 
all of the plurality of computing devices. 
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5. (Previously presented) The method of claim 4, wherein the plurality of 
templates includes a second category of templates that reflect policies 
applicable to only a subset of the plurality of computing devices. 

6. (Previously presented) The method of claim 4, wherein the plurality of 
templates includes another category of templates that reflect policies applicable 
to only a particular type of the plurality of computing devices. 

7. (Previously presented) The method of claim 1, wherein said policies are 
security polices regarding user access to each of the plurality of computing 
devices. 

8. (Currently amended) A system for automatically provisioning a plurality 
of computing devices in accordance with established policies, the system 
comprising; 

a database system which stores a plurality of templates which reflect said 
polices; 

a plurality of agents which are respectively resident on each of said 
plurality of computing devices, and which communicate with said 
database system to obtain information with regard to provisioning 
and maintenance of the respective computing devices; and 
a communications gateway through which communication messages are 
exchanged between said agents and said database system, 
wherein said communications gateway is configured to: 

retrieve individual ones of the plurality of templates; 
expand the retrieved templates to create respective 
documents containing combined template 
information and expanded information; and 
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provide the documents containing the combined template 
information and expanded information to said 
plurality of agents; 

wherein at least one of the templates are configured to selectablv 
incorporate a policy defined only by a different template . 

9. (Previously presented) The system of claim 8, wherein the structure of 
said plurality of templates includes conditional statements that determine 
whether a template is to be expanded with predetermined information on the 
basis of the computing device to which the expanded information is being 
provided. 

10. (Previously presented) The system of claim 9, wherein the plurality of 
templates includes a first category of templates that reflect policies applicable to 
all of the plurality of computing devices. 

11. (Previously presented) The system of claim 10, wherein the plurality of 
templates includes a second category of templates that reflect policies 
applicable to a subset of the plurality of computing devices. 

12. (Previously presented) The system of claim 10, wherein the plurality of 
templates includes another category of templates that reflect policies applicable 
to a particular type of the plurality of computing devices. 

13. (Previously presented) The system of claim 8, wherein said policies are 
security polices regarding user access to each of the plurality of computing 
devices. 

14. (Cancelled). 
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15. (Cancelled). 

16. (Previously presented) The system of claim 41 wherein said external 
information comprises a list of users. 

17. (Previously presented) The system of claim 9 wherein said 
communications gateway expands a template to include information contained 
in a conditional statement only if the computing device to which said expanded 
information is to be provided meets the condition. 

18. (Cancelled). 

19. (Cancelled). 

20. (Previously presented) The method of claim 39, wherein said external 
information comprises a list of users. 

21. (Previously presented) The method of claim 3, wherein said expanding 
step includes the step of including information contained in a conditional 
statement only if the computing device to which said expanded information is to 
be provided meets the condition. 

22. (Currently amended) A method of controlling user access to networked 
computing devices, comprising the steps of: 

storing a plurality of templates that identify user-access policies for 
respective ones of said devices, at least one of said templates 
including a reference to information that is external to the 
template; 

retrieving a template that pertains to a given one of said devices and 
creating a document at a central location comprising a listing of 
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users identified in said template and users identified by any 
externally referenced information; and 
sending said document from said central location to the given one of said 
devices^ 

configuring at least one of the templates to selectablv incorporate a policy 
defined only by a different template . 

23. (Cancelled). 

24. (Previously presented) The method of claim 22 wherein said external 
information comprises a list of users. 

25. (Previously presented) The method of claim 24 wherein all of the users 
on said list perform a specified role relative to said computing devices. 

26. (Previously presented) The method of claim 22 wherein at least one of 
said templates includes a conditional statement, and the step of creating a 
document comprises including information from said conditional statement in 
said document only if said given device meets the condition. 

27. (Previously presented) The method of claim 22, wherein said plurality of 
templates are classified into at least two categories, wherein a template in a first 
category pertains to all of the computing devices, and a template in a second 
category pertains to a subset of said computing devices. 

28. (Previously presented) The method of claim 27, wherein a template in 
said second category inherits policies contained in a template of said first 
category. 
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29. (Previously presented) The method of claim 28, wherein said inheritance 
can be selectively disabled. 

30. (Previously presented) The method of claim 28, further including a third 
category of templates that pertain to specific devices and inherit policies from 
templates in said second category. 

31. (Currently amended) A method for controlling user access to networked 
computing devices, comprising the steps of: 

storing a plurality of templates that identify user-access policies for 
respective ones of said devices, at least one of said templates 
including a conditional statement; 

retrieving a template that pertains to a given one of said devices and 
creating a document at a central location comprising a listing of 
users identified in said template, and users identified in any 
conditional statement if said given device meets the condition; and 

sending said document from said central location to the given one of said 
devices; 

configuring at least one of the templates to selectablv incorporate a policy 
defined only by a different template . 

32. (Cancelled). 

33. (Previously presented) The method of claim 31, wherein said plurality of 
templates are classified into at least two categories, wherein a template in a first 
category pertains to all of the computing devices, and a template in a second 
category pertains to a subset of said computing devices. 
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34. (Previously presented) The method of claim 33, wherein a template in 
said second category inherits policies contained in a template of said first 
category. 

35. (Previously presented) The method of claim 34, wherein said inheritance 
can be selectively disabled. 

36. (Previously presented) The method of claim 34, further including a third 
category of templates that pertain to specific devices and inherit policies from 
templates in said second category. 

37. (Previously presented) The method of claim 31 , wherein said document 
is an XML document. 

38. (Previously presented) The method of claim 22, wherein said document 
is an XML document. 

39. (Previously presented) The method of claim 1, wherein at least one 
template includes a reference to information external to the template, and 
wherein said expanding step comprises creating the document that includes 
information contained in the template and said external information. 

40. (Previously presented) The method of claim 39, wherein said document 
is an XML document. 

41. (Previously presented) The system of claim 8, wherein at least one 
ternplate includes a reference to information external to the template, and 
wherein said communication gateway expands the template by creating a 
document that includes information contained in the template and said external 
information. 
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42. (Previously presented) The system of claim 41 wherein said document is 
an XML document. 
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